Description
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix possible map leak in fastrpc_put_args copy_to_user() failure would cause an early return without cleaning up the fdlist, which has been updated by the DSP. This could lead to map leak. Fix this by redirecting to a cleanup path on failure, ensuring that all mapped buffers are properly released before returning.
Product status
c68cfb718c8f97b7f7a50ed66be5feb42d0c8988 (git) before a085658264d0c8d4f795d4631f77d7289a021de9
c68cfb718c8f97b7f7a50ed66be5feb42d0c8988 (git) before 3ad42dc66445df6977cf4be0c06f1a655299ce6c
c68cfb718c8f97b7f7a50ed66be5feb42d0c8988 (git) before 78d33a041555db03903e8037fd053ed74fbd88cb
c68cfb718c8f97b7f7a50ed66be5feb42d0c8988 (git) before c000f65f0ac93d9f9cc69a230d372f6ca93e4879
c68cfb718c8f97b7f7a50ed66be5feb42d0c8988 (git) before da1ba64176e0138f2bfa96f9e43e8c3640d01e1e
5.1
Any version before 5.1
6.1.156 (semver)
6.6.112 (semver)
6.12.53 (semver)
6.17.3 (semver)
6.18-rc1 (original_commit_for_fix)
References
git.kernel.org/...c/a085658264d0c8d4f795d4631f77d7289a021de9
git.kernel.org/...c/3ad42dc66445df6977cf4be0c06f1a655299ce6c
git.kernel.org/...c/78d33a041555db03903e8037fd053ed74fbd88cb
git.kernel.org/...c/c000f65f0ac93d9f9cc69a230d372f6ca93e4879
git.kernel.org/...c/da1ba64176e0138f2bfa96f9e43e8c3640d01e1e